diff --git a/net/wireless/mlme.c b/net/wireless/mlme.c
index 12b3edf70a7b..08a8729394d0 100644
--- a/net/wireless/mlme.c
+++ b/net/wireless/mlme.c
@@ -594,7 +594,8 @@ int cfg80211_mlme_mgmt_tx(struct cfg80211_registered_device *rdev,
 
 	mgmt = (const struct ieee80211_mgmt *)params->buf;
 
-	if (!ieee80211_is_mgmt(mgmt->frame_control))
+	if (!ieee80211_is_mgmt(mgmt->frame_control) ||
+	    ieee80211_has_order(mgmt->frame_control))
 		return -EINVAL;
 
 	stype = le16_to_cpu(mgmt->frame_control) & IEEE80211_FCTL_STYPE;